5 Replies Latest reply on Nov 5, 2008 12:53 PM by jogvan

    How to detect machines without agent

    jogvan
      What is the best way to get an overview of, which machines that do not have the McAfee Agent 4.0 installed?

      Is it possible to get this overview in ePO 4.0?
        • 1. RE: How to detect machines without agent
          Copy and paste the code below into a XML file and import it into your queries and modify to your liking for the output.


          File Name: Query_Managed_Systems_By_Agent_Version.xml


          <queries>
          <query>
          <name language="en">Managed_Systems_By_Agent_Versions</name>
          <description language="en">This Query shows managed systems by Agent Versions</description>
          <property name="target">EPOLeafNode</property>
          <property name="tableURI">query:table?orion.table.columns=EPOLeafNode.NodeName&amp;orion. table.order.by=EPOLeafNode.NodeName&amp;orion.table.order=az</property>
          <property name="conditionURI">query:condition?orion.condition.sexp=</property>
          <property name="summaryURI">query:summary?pie.slice.title=EPOLeafNode.AgentVersion&amp;or ion.show.other.limit=0&amp;orion.sum.order.by=count&amp;orion.show.other=false&a mp;orion.sum.time.cols=false&amp;orion.sum.aggregation.column=count&amp;orion.su m.group.by=EPOLeafNode.AgentVersion&amp;orion.sum.aggregation=count&amp;orion.su m.order=desc&amp;orion.sum.limit.count=0&amp;orion.chart.type=pie&amp;orion.sum. limit=false&amp;orion.sum.query=true</property>
          </query>
          </queries>
          • 2. RE: How to detect machines without agent
            jogvan
            When I import the xml file, I get this error message:

            The query could not be imported because the uploaded file is either corrupt or in an unexpected format. Click "OK" to return to the "Queries" page.
            • 3. RE: How to detect machines without agent
              Copy this code into a xml file and import it into your queries.
              This query shows all managed computer without agent 4.0.0.1180.
              You can also edit this query for your own options.


              <queries><query>
              <name language="en">Agents, who are not 4.0.0.1180</name>
              <description language="en"></description>
              <property name="target">EPOLeafNode</property>
              <property name="tableURI">query:table?orion.table.columns=EPOLeafNode.NodeName%3AEPOLeafN ode.AgentVersion%3AEPOComputerProperties.OSType%3AEPOProdPropsView_VIRUSCAN.prod uctversion%3AEPOProdPropsView_VIRUSCAN.enginever%3AEPOProdPropsView_VIRUSCAN.dat ver&amp;orion.table.order=az&amp;orion.table.order.by=EPOLeafNode.NodeName%3AEPO LeafNode.AgentVersion%3AEPOComputerProperties.OSType%3AEPOProdPropsView_VIRUSCAN .productversion%3AEPOProdPropsView_VIRUSCAN.enginever%3AEPOProdPropsView_VIRUSCA N.datver</property>
              <property name="conditionURI">query:condition?orion.condition.sexp=%28+where+%28+and+%28+ startsWith+EPOLeafNode.AgentVersion+%224%22+%29+%28+newerThan+EPOLeafNode.LastUp date+86400000++%29+%28+not_withinRepositoryDatVersion+EPOProdPropsView_VIRUSCAN. datver+3++%29+%28+or+%28+eq+EPOComputerProperties.OSType+%22Windows+XP%22+%29+%2 8+eq+EPOComputerProperties.OSType+%22Windows+Vista%22+%29+%29+%29+%29</property>
              <property name="summaryURI">query:summary?orion.chart.type=table&amp;orion.sum.query=fals e</property></query></queries>
              • 4. RE: How to detect machines without agent
                Interesting copy <queries>....<queries> into an XML should work but try DanielS and let us know. Other wise we walk you through it.
                • 5. RE: How to detect machines without agent
                  jogvan
                  Rebooting ePO server solved the issue.

                  Thanks happy